The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-63140: Reachable Assertion6.5 MediumN/A0%Jul 21, 2026
CVE-2026-63139: Uncontrolled Resource Consumption6.5 MediumN/A0%Jul 21, 2026
CVE-2026-63136: Uncontrolled Resource Consumption6.5 MediumN/A0%Jul 21, 2026
CVE-2026-63092: Missing Authorization4.3 Medium5.3 Medium0%Jul 21, 2026
CVE-2026-63080: Improper Neutralization of Special Elements used in an SQL Command6.5 Medium7.1 High0%Jul 21, 2026
CVE-2026-56147: Authorization Bypass Through User-Controlled Key7.1 HighN/A0%Jul 21, 2026
CVE-2026-52476: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Jul 21, 2026
CVE-2026-52475: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 21, 2026
CVE-2026-52474: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Jul 21, 2026
CVE-2026-52472: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Jul 21, 2026
CVE-2026-52470: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Jul 21, 2026
CVE-2026-52469: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Jul 21, 2026
CVE-2026-47714: Integer Overflow or Wraparound6.1 MediumN/A0%Jul 21, 2026
CVE-2026-47708: Improper Neutralization of Special Elements used in a CommandN/A9.3 Critical0%Jul 21, 2026
CVE-2026-47697: Incorrect Authorization7.1 HighN/A0%Jul 21, 2026
CVE-2026-47695: Server-Side Request Forgery (SSRF)N/A7.1 High0%Jul 21, 2026
CVE-2026-47690: Improper Neutralization of Special Elements used in a Command7.5 HighN/A0%Jul 21, 2026
CVE-2026-47689: Improper Neutralization of Input During Web Page Generation5.2 MediumN/A0%Jul 21, 2026
CVE-2026-47688: Missing Authorization8.2 HighN/A0%Jul 21, 2026
CVE-2026-47687: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Jul 21, 2026
CVE-2026-47685: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Jul 21, 2026
CVE-2026-47237: Incorrect Privilege Assignment8.0 HighN/A0%Jul 21, 2026
CVE-2026-47143: NULL Pointer Dereference5.9 MediumN/A0%Jul 21, 2026
CVE-2026-46556: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Jul 21, 2026
CVE-2026-45383: Out-of-bounds ReadN/A6.9 Medium0%Jul 21, 2026
48101-48125 of 413066